@breign/client 1.0.177 → 1.0.179

package/dist/openapi.json

@@ -3067,6 +3067,326 @@
         "tags" : [ "scheduledTasks" ]
       }
     },
+    "/agents/{agentId}/scheduled-tasks/{taskId}/webhook" : {
+      "get" : {
+        "operationId" : "getScheduledTaskWebhook",
+        "parameters" : [ {
+          "description" : "ID of the agent",
+          "in" : "path",
+          "name" : "agentId",
+          "required" : true,
+          "schema" : {
+            "format" : "uuid",
+            "type" : "string"
+          }
+        }, {
+          "description" : "ID of the scheduled task",
+          "in" : "path",
+          "name" : "taskId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "responses" : {
+          "200" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "$ref" : "#/components/schemas/WebhookEndpoint"
+                }
+              }
+            },
+            "description" : "The webhook, without its secret"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "403" : {
+            "description" : "Forbidden"
+          },
+          "404" : {
+            "description" : "Task not found, or not triggered by a webhook"
+          }
+        },
+        "summary" : "The webhook of an automation triggered by a webhook",
+        "tags" : [ "scheduledTasks" ]
+      },
+      "patch" : {
+        "operationId" : "updateScheduledTaskWebhook",
+        "parameters" : [ {
+          "description" : "ID of the agent",
+          "in" : "path",
+          "name" : "agentId",
+          "required" : true,
+          "schema" : {
+            "format" : "uuid",
+            "type" : "string"
+          }
+        }, {
+          "description" : "ID of the scheduled task",
+          "in" : "path",
+          "name" : "taskId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "requestBody" : {
+          "content" : {
+            "application/json" : {
+              "schema" : {
+                "$ref" : "#/components/schemas/WebhookEndpointUpdate"
+              }
+            }
+          },
+          "required" : true
+        },
+        "responses" : {
+          "200" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "$ref" : "#/components/schemas/WebhookEndpoint"
+                }
+              }
+            },
+            "description" : "The updated webhook"
+          },
+          "400" : {
+            "description" : "Invalid body"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "403" : {
+            "description" : "Forbidden (another service user requires an organization admin)"
+          },
+          "404" : {
+            "description" : "Task not found, or not triggered by a webhook"
+          },
+          "422" : {
+            "description" : "The service user is not a member of the organization"
+          }
+        },
+        "summary" : "Disable the webhook or change its service user",
+        "tags" : [ "scheduledTasks" ]
+      }
+    },
+    "/agents/{agentId}/scheduled-tasks/{taskId}/webhook/rotate-secret" : {
+      "post" : {
+        "operationId" : "rotateScheduledTaskWebhookSecret",
+        "parameters" : [ {
+          "description" : "ID of the agent",
+          "in" : "path",
+          "name" : "agentId",
+          "required" : true,
+          "schema" : {
+            "format" : "uuid",
+            "type" : "string"
+          }
+        }, {
+          "description" : "ID of the scheduled task",
+          "in" : "path",
+          "name" : "taskId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "responses" : {
+          "200" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "$ref" : "#/components/schemas/WebhookEndpoint"
+                }
+              }
+            },
+            "description" : "The webhook, with its new secret (shown once)"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "403" : {
+            "description" : "Forbidden"
+          },
+          "404" : {
+            "description" : "Task not found, or not triggered by a webhook"
+          }
+        },
+        "summary" : "Rotate the webhook secret (the old one stops working)",
+        "tags" : [ "scheduledTasks" ]
+      }
+    },
+    "/agents/{agentId}/scheduled-tasks/{taskId}/webhook/regenerate-url" : {
+      "post" : {
+        "operationId" : "regenerateScheduledTaskWebhookUrl",
+        "parameters" : [ {
+          "description" : "ID of the agent",
+          "in" : "path",
+          "name" : "agentId",
+          "required" : true,
+          "schema" : {
+            "format" : "uuid",
+            "type" : "string"
+          }
+        }, {
+          "description" : "ID of the scheduled task",
+          "in" : "path",
+          "name" : "taskId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "responses" : {
+          "200" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "$ref" : "#/components/schemas/WebhookEndpoint"
+                }
+              }
+            },
+            "description" : "The webhook at its new URL"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "403" : {
+            "description" : "Forbidden"
+          },
+          "404" : {
+            "description" : "Task not found, or not triggered by a webhook"
+          }
+        },
+        "summary" : "Give the webhook a new URL (the old one answers 404)",
+        "tags" : [ "scheduledTasks" ]
+      }
+    },
+    "/agents/{agentId}/scheduled-tasks/{taskId}/webhook/events" : {
+      "get" : {
+        "operationId" : "listScheduledTaskWebhookEvents",
+        "parameters" : [ {
+          "description" : "ID of the agent",
+          "in" : "path",
+          "name" : "agentId",
+          "required" : true,
+          "schema" : {
+            "format" : "uuid",
+            "type" : "string"
+          }
+        }, {
+          "description" : "ID of the scheduled task",
+          "in" : "path",
+          "name" : "taskId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        }, {
+          "in" : "query",
+          "name" : "limit",
+          "required" : false,
+          "schema" : {
+            "default" : 20,
+            "maximum" : 100,
+            "minimum" : 1,
+            "type" : "integer"
+          }
+        } ],
+        "responses" : {
+          "200" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "$ref" : "#/components/schemas/WebhookEventList"
+                }
+              }
+            },
+            "description" : "The latest calls, most recent first"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "403" : {
+            "description" : "Forbidden"
+          },
+          "404" : {
+            "description" : "Task not found, or not triggered by a webhook"
+          }
+        },
+        "summary" : "The latest calls received on the webhook",
+        "tags" : [ "scheduledTasks" ]
+      }
+    },
+    "/agents/{agentId}/scheduled-tasks/{taskId}/webhook/test" : {
+      "post" : {
+        "description" : "The call goes through the same ingestion as a real one, and the agent runs for real.",
+        "operationId" : "testScheduledTaskWebhook",
+        "parameters" : [ {
+          "description" : "ID of the agent",
+          "in" : "path",
+          "name" : "agentId",
+          "required" : true,
+          "schema" : {
+            "format" : "uuid",
+            "type" : "string"
+          }
+        }, {
+          "description" : "ID of the scheduled task",
+          "in" : "path",
+          "name" : "taskId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "requestBody" : {
+          "content" : {
+            "application/json" : {
+              "schema" : {
+                "$ref" : "#/components/schemas/WebhookTestRequest"
+              }
+            }
+          },
+          "required" : false
+        },
+        "responses" : {
+          "202" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "$ref" : "#/components/schemas/WebhookTestResponse"
+                }
+              }
+            },
+            "description" : "The test call is queued"
+          },
+          "400" : {
+            "description" : "Invalid body"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "403" : {
+            "description" : "Forbidden"
+          },
+          "404" : {
+            "description" : "Task not found, or not triggered by a webhook"
+          },
+          "422" : {
+            "description" : "The webhook or the automation is not active"
+          },
+          "429" : {
+            "description" : "Too many calls this minute"
+          }
+        },
+        "summary" : "Send a test call to the webhook, signed by the server",
+        "tags" : [ "scheduledTasks" ]
+      }
+    },
     "/agents/{agentId}/apps" : {
       "get" : {
         "description" : "Get apps for agent id",
@@ -6154,6 +6474,85 @@
         "tags" : [ "mcp" ]
       }
     },
+    "/mcp/builder" : {
+      "delete" : {
+        "description" : "Aucune session à clore : le transport est sans état.",
+        "operationId" : "deleteBuilderMcpSession",
+        "responses" : {
+          "405" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "$ref" : "#/components/schemas/McpJsonRpcResponse"
+                }
+              }
+            },
+            "description" : "Method not allowed"
+          }
+        },
+        "summary" : "Not supported (stateless MCP server)",
+        "tags" : [ "mcp" ]
+      },
+      "get" : {
+        "description" : "Pas de flux SSE côté serveur : le transport est sans état.",
+        "operationId" : "getBuilderMcpStream",
+        "responses" : {
+          "405" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "$ref" : "#/components/schemas/McpJsonRpcResponse"
+                }
+              }
+            },
+            "description" : "Method not allowed"
+          }
+        },
+        "summary" : "Not supported (stateless MCP server)",
+        "tags" : [ "mcp" ]
+      },
+      "post" : {
+        "description" : "Serveur MCP (Model Context Protocol, transport Streamable HTTP, sans état) qui crée et édite les agents des organisations de l'utilisateur : de quoi brancher Claude Code, ou tout client MCP, sur la configuration de Breign. Lié à la clé et non à une organisation : chaque outil vérifie que l'utilisateur est membre de celle qu'il touche. Distinct du serveur `/organizations/{organizationId}/mcp`, qui ne sert qu'à interroger les agents : brancher l'un ne donne pas les droits d'écriture de l'autre.\n\nAuthentification par clé API personnelle (`x-api-key` ou `Authorization: Bearer ai-…`) ; les credentials d'app et la clé maître sans `x-user-id` sont refusés. Chaque action est faite au nom du propriétaire de la clé, avec ses droits.\n\nOutils exposés — lecture :\n- `list_organizations` — organisations dont l'utilisateur est membre.\n- `list_agents` `{ organizationId }` — agents de l'organisation.\n- `get_agent` `{ agentId }` — configuration d'un agent : textes, moteur, skills et bases de\n  connaissance rattachés.\n\n- `list_engines` `{ organizationId }` — providers de l'organisation et leurs modèles.\n- `list_skills` `{ organizationId }` — skills de l'organisation.\n- `list_knowledge_bases` `{ organizationId }` — bases de connaissance de l'organisation.\n\nOutils exposés — écriture (jamais de suppression ni de détachement) :\n- `create_agent` `{ organizationId, name, persona, promptInit?, description?, role?,\n  defaultLanguage? }`.\n\n- `update_agent` `{ agentId, name?, description?, role?, defaultLanguage?, persona?,\n  promptInit?, isActivated? }` — `null` ou absent : champ inchangé.\n\n- `set_agent_engine` `{ agentId, providerId, model }`.\n- `attach_skill` `{ agentId, skillId }` — ajoute un skill, sans retirer les autres.\n- `attach_knowledge_base` `{ agentId, knowledgeBaseId }` — ajoute une base, sans retirer les\n  autres.\n\n\nUn agent Breign dont `builderMcpConfiguration.enabled` est vrai reçoit les mêmes outils, au nom de l'utilisateur de la conversation, bornés à l'organisation de l'agent (ni `list_organizations` ni `organizationId`) ; chaque écriture lui demande alors son approbation.\n\nConfiguration d'un client, par exemple Claude Code : `claude mcp add --transport http breign-builder https://<api>/mcp/builder --header \"Authorization: Bearer ai-…\"`. Le client doit accepter `application/json` et `text/event-stream` (header `Accept`).",
+        "operationId" : "handleBuilderMcpRequest",
+        "requestBody" : {
+          "content" : {
+            "application/json" : {
+              "schema" : {
+                "$ref" : "#/components/schemas/McpJsonRpcRequest"
+              }
+            }
+          },
+          "required" : true
+        },
+        "responses" : {
+          "200" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "$ref" : "#/components/schemas/McpJsonRpcResponse"
+                }
+              }
+            },
+            "description" : "Réponse JSON-RPC"
+          },
+          "202" : {
+            "description" : "Notification acceptée, sans corps"
+          },
+          "401" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "$ref" : "#/components/schemas/McpJsonRpcResponse"
+                }
+              }
+            },
+            "description" : "Clé API personnelle requise"
+          }
+        },
+        "summary" : "Builder MCP server",
+        "tags" : [ "mcp" ]
+      }
+    },
     "/conversations/{conversationId}/read" : {
       "post" : {
         "description" : "Positionne la marque de lecture de l'utilisateur sur la conversation.",
@@ -21282,6 +21681,12 @@
             } ],
             "nullable" : true
           },
+          "builderMcpConfiguration" : {
+            "allOf" : [ {
+              "$ref" : "#/components/schemas/AgentBuilderMcpConfiguration"
+            } ],
+            "nullable" : true
+          },
           "humanEscalationConfiguration" : {
             "allOf" : [ {
               "$ref" : "#/components/schemas/AgentHumanEscalationConfiguration"
@@ -21528,6 +21933,16 @@
         },
         "type" : "object"
       },
+      "AgentBuilderMcpConfiguration" : {
+        "description" : "Access to Breign's builder MCP server (create and edit the organisation's agents) from inside a conversation, acting as the user of that conversation. Opt-in; only an organisation admin can change it. Every write the agent makes through it asks the user for approval first.",
+        "properties" : {
+          "enabled" : {
+            "description" : "Gives this agent the builder tools.",
+            "type" : "boolean"
+          }
+        },
+        "type" : "object"
+      },
       "AgentHumanEscalationConfiguration" : {
         "description" : "Per-agent activation of the Human_ask tool, offered only in task conversations (a local agent or another agent asking). The question goes to the first valid referent; without one, to the user who owns the task — the person who connected the local agent.",
         "properties" : {
@@ -21760,6 +22175,12 @@
             } ],
             "nullable" : true
           },
+          "builderMcpConfiguration" : {
+            "allOf" : [ {
+              "$ref" : "#/components/schemas/AgentBuilderMcpConfiguration"
+            } ],
+            "nullable" : true
+          },
           "humanEscalationConfiguration" : {
             "allOf" : [ {
               "$ref" : "#/components/schemas/AgentHumanEscalationConfiguration"
@@ -23339,12 +23760,15 @@
             "allOf" : [ {
               "$ref" : "#/components/schemas/TaskSchedule"
             } ],
-            "description" : "null for an automation triggered by an event.",
+            "description" : "null for an automation triggered by an event or a webhook.",
             "nullable" : true
           },
           "trigger" : {
             "$ref" : "#/components/schemas/TaskTrigger"
           },
+          "webhook" : {
+            "$ref" : "#/components/schemas/WebhookEndpoint"
+          },
           "cronExpression" : {
             "type" : "string"
           },
@@ -23446,10 +23870,14 @@
         "type" : "object"
       },
       "TaskTrigger" : {
-        "description" : "What starts the automation. `schedule` (default): its schedule. `event`: a mention of one of the bot accounts in GitLab, in the given kinds of objects and projects (empty: all projects; `groupe/projet` or `groupe/*`).",
+        "description" : "What starts the automation. `schedule` (default): its schedule. `event`: a mention of one of the bot accounts in GitLab, in the given kinds of objects and projects (empty: all projects; `groupe/projet` or `groupe/*`). `webhook`: a call to its webhook (see `ScheduledTask.webhook`); the result goes to `callbackUrl`.",
         "properties" : {
           "type" : {
-            "enum" : [ "schedule", "event" ],
+            "enum" : [ "schedule", "event", "webhook" ],
+            "type" : "string"
+          },
+          "runAsUserId" : {
+            "description" : "`webhook` only, on create or update: the member the conversations run as (default: the caller; another member requires an organization admin). Not stored on the task.",
             "type" : "string"
           },
           "source" : {
@@ -23483,7 +23911,7 @@
         "type" : "object"
       },
       "ScheduledTaskCreate" : {
-        "description" : "`schedule` is required unless `trigger.type` is `event` (then `mode` must be `recurring`).",
+        "description" : "`schedule` is required unless `trigger.type` is `event` or `webhook` (then `mode` must be `recurring`). A `webhook` trigger creates the webhook, returned in `webhook` with its secret (shown once).",
         "properties" : {
           "message" : {
             "minLength" : 1,
@@ -23654,15 +24082,31 @@
         "type" : "object"
       },
       "ScheduledTaskRunTrigger" : {
-        "description" : "The GitLab mention that triggered a run.",
+        "description" : "The external event that triggered a run: a GitLab mention (`source: gitlab`, GitLab fields set) or a webhook call (`source: webhook`: `thread`, `contentType`, `payload`).",
         "properties" : {
           "eventId" : {
             "type" : "string"
           },
           "source" : {
-            "enum" : [ "gitlab" ],
+            "enum" : [ "gitlab", "webhook" ],
+            "type" : "string"
+          },
+          "thread" : {
+            "description" : "webhook only — the `X-Breign-Thread` of the call.",
+            "nullable" : true,
             "type" : "string"
           },
+          "contentType" : {
+            "description" : "webhook only.",
+            "type" : "string"
+          },
+          "payload" : {
+            "description" : "webhook only — the body received (untrusted caller data), or its start as text."
+          },
+          "payloadTruncated" : {
+            "description" : "webhook only.",
+            "type" : "boolean"
+          },
           "status" : {
             "$ref" : "#/components/schemas/ExternalEventStatus"
           },
@@ -23719,7 +24163,138 @@
             "type" : "string"
           }
         },
-        "required" : [ "author", "body", "botUsername", "conversationId", "eventId", "noteUrl", "projectPath", "receivedAt", "replyUrl", "routing", "source", "status", "targetIid", "targetTitle", "targetType", "targetUrl" ],
+        "required" : [ "conversationId", "eventId", "receivedAt", "source", "status" ],
+        "type" : "object"
+      },
+      "WebhookEndpoint" : {
+        "description" : "The public address of an automation triggered by a webhook. Callers POST to `url` with `Authorization: Bearer <secret>`, or sign the raw body with HMAC-SHA256 (`X-Breign-Signature: sha256=<hex>`; with `X-Breign-Timestamp: <unix seconds>` the signature covers `<timestamp>.<body>`). Optional headers: `Idempotency-Key`, `X-Breign-Thread`.",
+        "properties" : {
+          "id" : {
+            "type" : "string"
+          },
+          "url" : {
+            "type" : "string"
+          },
+          "status" : {
+            "enum" : [ "active", "disabled" ],
+            "type" : "string"
+          },
+          "runAsUserId" : {
+            "description" : "The organization member the conversations run as (user-scoped MCP tools, quotas, history).",
+            "type" : "string"
+          },
+          "lastEventAt" : {
+            "format" : "date-time",
+            "nullable" : true,
+            "type" : "string"
+          },
+          "createdAt" : {
+            "format" : "date-time",
+            "type" : "string"
+          },
+          "updatedAt" : {
+            "format" : "date-time",
+            "type" : "string"
+          },
+          "secret" : {
+            "description" : "Only returned when the endpoint is created and after a rotation.",
+            "type" : "string"
+          }
+        },
+        "required" : [ "createdAt", "id", "lastEventAt", "runAsUserId", "status", "updatedAt", "url" ],
+        "type" : "object"
+      },
+      "WebhookEndpointUpdate" : {
+        "minProperties" : 1,
+        "properties" : {
+          "runAsUserId" : {
+            "description" : "Another member than the caller requires an organization admin.",
+            "type" : "string"
+          },
+          "status" : {
+            "enum" : [ "active", "disabled" ],
+            "type" : "string"
+          }
+        },
+        "type" : "object"
+      },
+      "WebhookEventList" : {
+        "properties" : {
+          "events" : {
+            "items" : {
+              "$ref" : "#/components/schemas/WebhookEvent"
+            },
+            "type" : "array"
+          }
+        },
+        "required" : [ "events" ],
+        "type" : "object"
+      },
+      "WebhookEvent" : {
+        "description" : "A call received on the webhook, and where it is in the queue.",
+        "properties" : {
+          "id" : {
+            "type" : "string"
+          },
+          "status" : {
+            "$ref" : "#/components/schemas/ExternalEventStatus"
+          },
+          "receivedAt" : {
+            "format" : "date-time",
+            "type" : "string"
+          },
+          "finishedAt" : {
+            "format" : "date-time",
+            "nullable" : true,
+            "type" : "string"
+          },
+          "attempts" : {
+            "type" : "integer"
+          },
+          "lastError" : {
+            "nullable" : true,
+            "type" : "string"
+          },
+          "thread" : {
+            "nullable" : true,
+            "type" : "string"
+          },
+          "contentType" : {
+            "type" : "string"
+          },
+          "runId" : {
+            "nullable" : true,
+            "type" : "string"
+          },
+          "conversationId" : {
+            "nullable" : true,
+            "type" : "string"
+          }
+        },
+        "required" : [ "attempts", "contentType", "conversationId", "finishedAt", "id", "lastError", "receivedAt", "runId", "status", "thread" ],
+        "type" : "object"
+      },
+      "WebhookTestRequest" : {
+        "properties" : {
+          "body" : {
+            "description" : "The JSON body of the test call (default `{\"test\": true}`)."
+          },
+          "thread" : {
+            "description" : "Sent as `X-Breign-Thread`.",
+            "maxLength" : 200,
+            "type" : "string"
+          }
+        },
+        "type" : "object"
+      },
+      "WebhookTestResponse" : {
+        "properties" : {
+          "eventId" : {
+            "nullable" : true,
+            "type" : "string"
+          }
+        },
+        "required" : [ "eventId" ],
         "type" : "object"
       },
       "AppLight" : {
@@ -26908,8 +27483,8 @@
             "type" : "string"
           },
           "resourceKind" : {
-            "description" : "Which family the approval belongs to. url is an address the agent sandbox may reach; urlPattern is a glob covering a whole site, subdomains included; command is one exact command line it may run.",
-            "enum" : [ "url", "command", "urlPattern" ],
+            "description" : "Which family the approval belongs to. url is an address the agent sandbox may reach; urlPattern is a glob covering a whole site, subdomains included; command is one exact command line it may run; mcpTool is an MCP tool that writes, as server/tool (for example builder/update_agent), whatever its arguments — stored under toolName mcp. An mcpTool approval is only ever born of a question the agent asked: it cannot be created or edited by hand.",
+            "enum" : [ "url", "command", "urlPattern", "mcpTool" ],
             "type" : "string"
           },
           "resource" : {
@@ -27629,6 +28204,14 @@
             },
             "type" : "array",
             "uniqueItems" : true
+          },
+          "approvalModes" : {
+            "additionalProperties" : {
+              "enum" : [ "always", "never" ],
+              "type" : "string"
+            },
+            "description" : "Quand un appel de l'outil demande l'approbation de l'utilisateur, par nom d'outil. Absent : automatique — demandée sauf si le serveur déclare l'outil en lecture seule (readOnlyHint). always : toujours demander, et refuser l'appel quand personne ne peut répondre (tâche planifiée, widget, appel entre agents). never : ne jamais demander.",
+            "type" : "object"
           }
         },
         "required" : [ "allowedTools" ],
@@ -27643,6 +28226,14 @@
               "type" : "string"
             },
             "type" : "array"
+          },
+          "approvalModes" : {
+            "additionalProperties" : {
+              "enum" : [ "always", "never" ],
+              "type" : "string"
+            },
+            "description" : "Quand un appel de l'outil demande l'approbation de l'utilisateur, par nom d'outil. Absent : automatique — demandée sauf si le serveur déclare l'outil en lecture seule (readOnlyHint). always : toujours demander, et refuser l'appel quand personne ne peut répondre (tâche planifiée, widget, appel entre agents). never : ne jamais demander.",
+            "type" : "object"
           }
         },
         "required" : [ "allowedTools" ],
@@ -29066,7 +29657,7 @@
             "type" : "string"
           },
           "tool" : {
-            "description" : "Name of the tool the model called. Three values are produced by the server today. take_screenshot asks the client to capture the screen. bash_network_approval is an agent sandbox asking permission to reach an address: arguments carries url (the full address, to be shown as-is), urlPrefix (what a yes actually grants), origin, host and method. bash_command_approval is an agent sandbox asking permission to run a command through one of its interpreters — python3 or js-exec: arguments carries command, which is both what has to be shown in full and exactly what a yes grants — nothing ran, so a refusal leaves the sandbox untouched. Calls named bash_python_approval, the name this last one carried while python was the only interpreter, may still be waiting in older conversations and resolve exactly the same way.",
+            "description" : "Name of the tool the model called. Four values are produced by the server today. mcp_tool_approval asks permission to run an MCP tool: a write of the builder server, which creates and edits agents, or a tool of an MCP server configured in the organisation, by its approval mode (see Tool.mcp.approvalModes). arguments carries server (builder, or the id of the organisation's tool), serverName (the name to show), tool and arguments (the exact call the model wants to make), and — builder only — preview — what the call changes, for display only: tool, agentName, changes (field, before when something existed, after, with names instead of ids, unchanged fields left out) and warnings (deactivates, rewritesInstructions, changesEngine); null when it could not be built. Allow once covers exactly these arguments; agentUser covers the tool whatever its arguments. take_screenshot asks the client to capture the screen. bash_network_approval is an agent sandbox asking permission to reach an address: arguments carries url (the full address, to be shown as-is), urlPrefix (what a yes actually grants), origin, host and method. bash_command_approval is an agent sandbox asking permission to run a command through one of its interpreters — python3 or js-exec: arguments carries command, which is both what has to be shown in full and exactly what a yes grants — nothing ran, so a refusal leaves the sandbox untouched. Calls named bash_python_approval, the name this last one carried while python was the only interpreter, may still be waiting in older conversations and resolve exactly the same way.",
             "type" : "string"
           },
           "status" : {
@@ -29129,7 +29720,7 @@
             "type" : "string"
           },
           "approvalScope" : {
-            "description" : "Only read when resolving a bash_network_approval or bash_command_approval call with status completed: how far the approval reaches. once — the suspended reply and nothing after it, so the same request is asked about again next time — is the default, and nothing is stored. agentUser covers this agent, for this user, across all of their conversations, and is kept until revoked. Any other value is refused with a 400. Never widens what the agent is allowed to do: the server-side lock and the per-agent switch remain prerequisites. Only the user the question was asked of may answer it: an approval is a personal consent, so another caller — an admin included — gets a 403.",
+            "description" : "Only read when resolving a bash_network_approval, bash_command_approval or mcp_tool_approval call with status completed: how far the approval reaches. once — the suspended reply and nothing after it, so the same request is asked about again next time — is the default, and nothing is stored. agentUser covers this agent, for this user, across all of their conversations, and is kept until revoked. Any other value is refused with a 400. Never widens what the agent is allowed to do: the server-side lock and the per-agent switch remain prerequisites. Only the user the question was asked of may answer it: an approval is a personal consent, so another caller — an admin included — gets a 403.",
             "enum" : [ "once", "agentUser" ],
             "type" : "string"
           },
@@ -34689,6 +35280,14 @@
               "type" : "string"
             },
             "type" : "array"
+          },
+          "approvalModes" : {
+            "additionalProperties" : {
+              "enum" : [ "always", "never" ],
+              "type" : "string"
+            },
+            "description" : "Quand un appel de l'outil demande l'approbation de l'utilisateur, par nom d'outil. Absent : automatique — demandée sauf si le serveur déclare l'outil en lecture seule (readOnlyHint). always : toujours demander, et refuser l'appel quand personne ne peut répondre (tâche planifiée, widget, appel entre agents). never : ne jamais demander.",
+            "type" : "object"
           }
         },
         "type" : "object"